Strange that the main national domain registrar (http://manage.datacom.mn) yet don’t use SSL for own management console. Mobinet, national cloud provider even don’t have DNS registration for own services asking to create hosts file records for vps-mgnt.mobinet.mn. Mobinet who resells Comodo SSL doesn’t have valid SSL for https://vps-mgnt.mobinet.mn/ (and looks like self-signed SSL is created to conflict with vmware cert namespace).
SSL providers suggest DNS (email) validation for certificate CSR, so vulnerable web DNS manager (not protected by SSL) can compromise issued SSL certs and finally web sites with online banking, payment systems and so on. I suggest for low-budget , non-critical or experimental sites to use at least free SSL certs from https://zerossl.com/ – better than absence or wrong SSL certs.
If main key security players are neglect in own responsibilities, what to say about others.
Price from Mobinet for Comodo instantSSL is 360 000 mnt + 50 000 mnt (for installation) = 410 000 mnt (about 150-170 usd per year) :
If you buy directly from Comodo 77 usd per year:
If you have any questions how to install free “Let’s encrypt” SSL, free Comodo SSL for 90 days, or how to buy, install, configure long-term SSL for your web site feel free to contact with me.
To auto renew “Let’s encrypt” free SSL read my next post
ps.
Useful links:
- https://www.startcomca.com
- https://zerossl.com/
- https://letsencrypt.org/
- https://www.positivessl.com/free-secure-email-certificates.php?key5sk1=dec9c8d183e8373cf33d1abd6151530d9568f607
- https://www.sslforfree.com/
- https://www.symantec.com/theme/encryption-everywhere
- https://pantheon.io/docs/guides/cloudflare-enable-https/
- https://collectiveidea.com/blog/archives/2016/09/22/free-ssl-on-heroku
- https://www.register.com/product/security-sslcertificates.rcmx
- https://www.mobicom.mn/en/m/246
- https://www.namecheap.com/security/ssl-certificates/domain-validation.aspx